SignatureDescription could not be created for the signature algorithm supplied

[cloudcon]

Essa semana me deparei com um problema.

O ACBR está assinando a RPS e a prefeitura de vitória estava retornando o erro de assinatura inválida.

Ao tentar validar o RPS no site da receita também informa que a assinatura é inválida.

 

Informações sobre a validade da assinatura

A assinatura digital do documento fornecido não é válida. 
Motivo: SignatureDescription could not be created for the signature algorithm supplied.

 

estou com os fontes mais atuais e usando WinCrypt.

Fiz algumas verificações, no meu xml antigo que funcionava a assinatura vinha assim

-<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">


-<SignedInfo>

<CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>

<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>


-<Reference URI="#rps51">


-<Transforms>

<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>

<Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>

</Transforms>

<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>

<DigestValue>cxrc3s32EH/jIKt83ZRohGpIiL0=</DigestValue>

</Reference>

</SignedInfo>

<SignatureValue>XfI1K4h8+gnRWR/5QEWddvlpA4Y6inp/WMWCZeJDf/iiW/ZuAXw0l3uSuWCjuhSby5YMjlkT3RJknQ2kNj/5RDPSnIt0QTQABq4v0gB7YWlPcRn4mL0u+SZf9YK7ZuzKHV+kZYZdoRm0TfRws+Iznc60beI5zT9YXI+OwByW+Iif1VUQ7/sK6pxe06CvmwBNdpsQOpXvLpqaXAvz98EmypmB2xcOV739xaBjKBIuxtKa09yBkhYeWCGGVOU3EvihJ/g5fvzM9dJZbujbp3P1qKw1wBDnSfdTMNH8NIKiK4b/stqA3lRAyxpHjXA+7JR86E/zBCnH5Nr2s0pGePex6w==</SignatureValue>


-<KeyInfo>


-<X509Data>

<X509Certificate>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</X509Certificate>

</X509Data>

</KeyInfo>

</Signature>

O tipo de criptografia era <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>

Agora o novo xml

 

-<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">


-<SignedInfo>

<CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>

<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>


-<Reference URI="#rps171">


-<Transforms>

<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>

<Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>

</Transforms>

<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>

<DigestValue>dqXgCIZH7yDlKaELJ5scpZPiWFc=</DigestValue>

</Reference>

</SignedInfo>

<SignatureValue>HMrbDsGXiMZVSAnuE6PlnDvut461m5HneGHy1gsIb00h1KBUzcBBTZsug94K6C9aUqXGrp0W7Qm1FbPc0gp4/3QpjQAedKfhK0dea1DqcRy6v/boVoQBgE/9asg8xSnhCx6C96t7Xub5IF9inhzY4KolcUQuLmbkt7bgvrrH9HTH3PjmCrQwupJeXOfm+Xe6PgP08h0BdP1LCs+I7aqOzXOIWHziTeX6wW+jWnjy/QStGug0hhoxPASRLvMTpllNmtdsMmJ3sFD3RNMO7dLEtKMIfdZV2oYWIe4PgzD7lZzf2SWgnpwgD8W+6TQq22eBAkyZlh+DtRD58Wui/AxNyg==</SignatureValue>


-<KeyInfo>


-<X509Data>

<X509Certificate>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</X509Certificate>

</X509Data>

</KeyInfo>

</Signature>

agora o novo está com a criptografia <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>

Esse erro de validação de assinatura ocorre pela versão da criptografia ?

Alguém já passou por esse problema ?

Estou anexando dois xmls, antigo assinatura valida e novo assinatura inválida .

Obs: Certificado Digital Valido, dentro do prazo e com teste de assinatura realizado no site do SERASA.

 

Assinatura Invalida.xml

Assinatura Valida.xml

Editado 2 Julho, 2017 por cloudcon
Observações sobre o certificado digital

[cloudcon]

Resolvido.

Atualizei as cadeias de certificado para V5 e tudo funcionou novamente.

 

[Matheus de Mello]

cloudcon

Como vc fez para atualizar a cadeia de certificado?

[cloudcon]

Matheus me desculpe pela demora no retorno.
Eu não recebi o e-mail de notificação.
Seguinte, eu entrei no site do Serasa, que no caso é o emissor do meu certificado, e lá havia a opção de cadeia de certificados, eu baixei e importei as cadeiras pelo internet explorer.

Só isso e funcionou.